Apple AirPort Base Station Firmware Multiple Security Vulnerabilities

Bugtraq ID:	108544
Class:	Unknown
CVE:	CVE-2019-8581 CVE-2019-8588 CVE-2019-8578 CVE-2019-8580 CVE-2019-8572 CVE-2019-7291 CVE-2019-8575
Remote:	Yes
Local:	No
Published:	May 30 2019 12:00AM
Updated:	May 30 2019 12:00AM
Credit:	Lucio Albornoz, Vince Cali (@0x56), Maxime Villard, joshua stein
Vulnerable:	Apple AirPort Time Capsule 0 Apple Airport Extreme 0 Apple Airport Base Station Firmware 7.7.9 Apple Airport Base Station Firmware 7.7.8 Apple Airport Base Station Firmware 7.7.7 Apple Airport Base Station Firmware 7.7.3 Apple Airport Base Station Firmware 7.6.9 Apple Airport Base Station Firmware 7.6.8 Apple Airport Base Station Firmware 7.6.7 Apple Airport Base Station Firmware 7.6.4 Apple Airport Base Station Firmware 7.6.3 Apple Airport Base Station Firmware 7.6.2 Apple Airport Base Station Firmware 7.6.1 Apple Airport Base Station Firmware 7.6 Apple Airport Base Station Firmware 7.5.2 Apple Airport Base Station Firmware 7.4.2 Apple Airport Base Station Firmware 7.4.1 Apple Airport Base Station Firmware 7.3.2
Not Vulnerable:	Apple Airport Base Station Firmware 7.9.1

Apple AirPort Base Station Firmware Multiple Security Vulnerabilities

AirPort Base Station Firmware is prone to multiple security vulnerabilities.

Attackers can exploit these issues to execute arbitrary code, bypass security restrictions, gain sensitive information and cause denial-of-service conditions.

Versions prior to AirPort Base Station Firmware 7.9.1 are vulnerable.

Apple AirPort Base Station Firmware Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple AirPort Base Station Firmware Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.